How fab! The ICO has an enforcement actions page where it lists their enforcement actions. You can filter it by type of action and date. The type of actions include prosecutions of which they have conducted 25, 18 of those this year! Has someone woken up? This blog looks at the activity of the CPS and the Courts in defending privacy rights, dated 2014, averaging around 100 prosecutions each year. How real is a threat of GDPR enforcement? Although fines which do not require a prosecution by the ICO will/may hurt!